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Digital signal transmitting methods, digital signal receiving apparatus, and recording media 



(57) A digital signal transmitting method, a digital 
signal receiving apparatus (40). and a recording medi- 
um (101) ensure the security of fee-charged software 
information. When an image providing predetermined 
sen/ices is transmitted, a band-compression coded dig- 
ital video signal is subjected to first-encryption process- 



ing and then the digital signal is subjected to further en- 
cryption processing and transmitted. Therefore, double 
security can be added to the video signal and a digital 
signal transmitting method of more firmly ensured secu- 
rity can be realized. 
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Description 

This invention relates to digital signal transmitting 
methods, digital signal receiving apparatus, and record- 
ing media: and is applicable, for example, to a digital 
signal transmitting system which provides fee-charged 
software information to contract users. 

In a previously proposed digital signal transmitting 
system using satellites or cables, as shown in Fig. 1 , a 
program source PS, input to a digital signal transmitting 
apparatus, i.e., a broadcasting station 1, is band-com- 
pression coded with a moving picture image coding ex- 
perts group (MPEG) method by means of an MPEG en- 
coder 2 and is converted to packet transmission data by 
means of a packet generation section 3. 

The packetized transmission data is multiplexed by 
a multiplexer 4, then the transmission data is scrambled 
for security by an encryption processing section 5. and 
finally Keys (ciphers) are put over the scrambled data 
many times so that the scrambling cannot be descram- 
bled easily. The encrypted transmission data is error 
corrected by a forward error correction (FEC) section 6 
and modulated by a modulator 7. The modulated data 
is then sent through a digital satellite S directly to a digital 
signal receiving apparatus installed in a contract user's 
household, i.e.. a terminal 10 (Fig. 2). or sent through 
the digital satellite 3 to a signal distributing station 9 (Fig. 
2) which is called a head end, The data, transmitted to 
the signal distributing station 9. is sent to the terminal 
10 via cable. 

Now. as shown in Fig. 2. in the terminal 10. when 
the transmission data is directly sent via the satellite 9. 
the data is received by an antenna 1 1 and sent to a front 
end section 1 2. When the transmission data is sent from 
the signal distributing station 9 via the cable, it is input- 
ted directly to the front end section 1 2. A user contract- 
ing with the broadcasting station 1 accesses a key au- 
thorized to each user to the terminal 10, with respect to 
the transmission data sent directly from the satellite 3 
or from the satellite 3 via the signal distributing station 
9. so that the user is authorized as a contract user and 
bill processing is performed, and at the same time, the 
user can appreciate desired software information. 

That is. in the terminal 10. the transmission data is 
processed by the front end section 1 2 comprising a tun- 
er, a demodulator and an error corrector and the proc- 
essed data is input to a data fetch section 1 3. In the data 
fetch section 1 3. the multiplexed data is demultiplexed 
by the demultiplexer 14 so that the data is separated 
into an video signal, an audio signal, and data other than 
these signals. In a decryption section 15, ciphers are 
decrypted while performing bill processing. In a packet 
separation section 16. the decrypted data is packet sep- 
arated. Finally, the compression of the data is expanded 
by an MPEG decoder 17. and the video and audio sig- 
nals, which are digital-to-anaiog converted to analog 
signals, are output to television. 

Incidentally, in the digital signal transmission sys- 



tem, when fee-charged software information such as 
video on demand or near video on demand is transmit- 
ted, a digital storage 1 8 such as tape media or disk me- 
dia is incorporated into or connected to the terminal 10 

s to meet the convenience of users and to effectively uti- 
lize a digital transmission path. In such a case, large 
amounts of software data have been downloaded to the 
storage 18 by making use of an unoccupied time band 
and an unoccupied transmission path, and when the 

^0 user looks at the software information near at hand, the 
user accesses it with an ID card (for example, smart 
card) 19 to perform bill processing, and reproduction 
limitation is lifted. 

More specifically, if the user accesses a central 

'5 processing unit (CPU) 20 by means of the smart card 
19, the CPU 20 performs an inquiry of registration to an 
authorization center 22 (Fig. 1) through a modem 21. 
The authorization center 22 confirms registration by 
means of a conditional access 23. If registration is con- 

20 firmed, the authorization center 22 performs bill 
processing and also performs notification of confirma- 
tion to the CPU 20 through the modem 21. 

The CPU 20 instructs decryption of key to a local 
conditional access 24 by this notification, and the local 

25 conditional access 24 decrypts a cipher which has been 
put over the data recorded on the storage 18. Hence, 
the reproduction limitation is lifted, and the packet of the 
data recorded on the storage 18 is separated by the 
packet separation section 16. The compression of the 

30 packet-separated data is decompressed (expanded) by 
the MPEG decoder 17 and then the expanded data is 
digital-to-analog converted to be output to television as 
the analog signal and audio signal A/V. 

However if. in the security system in a current 

35 broadcasting form, software information has been 
downloaded to the storage 18. as described above, to 
try to realize a system where this software can be ap- 
preciated when user wants to see it. then the following 
problems will arise. 

-^0 More specifically, in the current digital signal trans- 
mitting system, when a cipher is decrypted by the de- 
crypting section 15 and then software information is 
downloaded to the storage 18. as shown by point A in 
Fig. 1 3. fee-charged software cannot be downloaded to 

^5 the storage 18 by decrypting the cipher without billing, 
because decrypting a cipher is, i.e.. billing. Now. if only 
billing information is made free, all ciphers of data are 
decrypted, and downloaded to the storage 18. then a 
piece of software information is passed as it is and out- 

so put from the terminal 10. 

Also, in a case where the storage 18 is not incorpo- 
rated into the terminal 1 0 but is connected to the terminal 
1 0 and switching means is not provided between the de- 
cryption section 15 and the packet separation section 

55 16. if ciphers are all decrypted and downloaded to the 
storage 18. then the decrypted data are alt sent and 
there is the possibility that they can been seen for free 
at point C of Fig. 3 by persons other than contract users. 
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To solve these problems, data can be downloaded 
to the storage 18 before ciphers are decrypted, i.e.. after 
multiplex is demuittplexed by the demultiplexer 1 4 (point 
B of Fig, 3). If. however data are downloaded to the stor- 
age 18 after multiplex is demultiplexed by the demulti- 
plexer 14. there is the problem that intra-coded (I) pic- 
tures can not be pulled out and can not be reproduced 
at variable speed, because data remain encrypted. 

Also, in broadcasting systems where data are en- 
crypted, keys are changed annually or biennially to en- 
sure security. Therefore, when a key is changed after 
software information is downloaded to the storage 1 8, 
there is the problem that ciphers cannot be decrypted 
and therefore the downloaded software information can- 
not be seen. 

According to a first aspect of the invention there is 
provided a digital signal transmitting method wherein at 
least a band-compression coded digital video signal is 
given encryption processing and transmitted, in which 
when an image providing predetermined services is 
transmitted, the band-compression coded digital signal 
IS given first-encryption processing and then the first- 
encryption processed digital signal is further given the 
encryption processing and transmitted. 

According to a preferred form of implementing the 
method according to the first aspect of the invention, the 
band-compression coded and encryption processed 
digital signal is mixed with the digital signal where the 
band-compression encoding has been completed within 
a predetermined image unit, and the mixed signal is 
transmitted. 

According to a second aspect of the invention there 
is provided a digital signal receiving apparatus (40) for 
receiving at least a band-compression coded digital vid- 
eo signal over which a first cipher is put and then a sec- 
ond cipher is put and which is transmitted by a broad- 
casting station, the apparatus comprising second de- 
crypting means ( 1 5. 1 9) for decrypting the second cipher 
put over the digital signal; recording/reproducing means 
(73. 74. 75. 75. 77) for recording the digital signal, where 
the second cipher was decrypted, on a recording medi- 
um, and also for reproducing the digital signal recorded 
on the recording medium: and first decrypting means 
(46. 91 ) for decrypting the first cipher of a reproduction 
signal that is reproduced from the recording medium. 

Furthermore, according to a third aspect of the in- 
vention, there is provided a recording medium (101) 
wherein at least a band-compression coded digital video 
signal has been encrypted and recorded. 

A preferred form of implementation of the invention 
provides a digital signal transmitting method, a digital 
signal receiving apparatus, and a recording medium 
which are capable of ensuring security when fee- 
charged software information is transmitted. 

The preferred form of implementation is described 
in detail below with reference to the accompanying 
drawings. First, however, it will be described in outline. 

When an image providing predetermined services 



is transmitted, a band-compression coded digital video 
signal is given first-encryption processing and then the 
digital signal is further given encryption processing and 
transmitted. Therefore, double security can be added to 
5 the video signal so that a digital signal transmitting meth- 
od where its secunty is more firmly ensured can be re- 
alized. 

Further, at least a band-compression coded and 
first-encryption processed digital video signal are mixed 
ro with the digital signal where the band-compression en- 
coding has been completed within a predetermined im- 
age unit in a broadcasting station (30). Therefore, vari- 
able-speed reproduction image can be viewed without 
performing variable-speed reproduction processing at a 
IS terminal (40). 

When a first cipher and a second cipher are put over 
a digital signal where at least an video signal was the 
band-compression coded, and the digital signal which 
is transmitted by the broadcasting station (30) is re- 
20 ceived. the second cipher of the received digital signal 
IS decrypted by the second decrypting means (1 5. 19) 
and the second decrypted digital signal is recorded on 
a recording medium by means of recording/reproducing 
means (73. 74. 75. 77). At the time of reproduction, the 
25 first cipher of the reproduction signal which is repro- 
duced from the recording medium is decrypted by the 
first decrypting means (46. 91). Hence, a digital signal 
receiving apparatus (40) where security is more firmly 
ensured can be realized. 
30 Furthermore, there is provided a recording medium 
(101) wherein at least a band-compression coded digital 
video signal has been encrypted and recorded. With 
this, contract users are able to cheaply obtain the re- 
cording medium (101 ) where a plurality of pieces of en- 
35 crypted software information are recorded, and are able 
to construct a new software information supply system 
where only information that users desire to see is billed 
and enjoyed. 

The invention will now be further described, by way 
-to of illustrative and non-limiting example, with reference 
to the accompanying drawings, in which like parts are 
designated by like reference numerals or characters, 
and in which: 



45 



so 



55 



Fig. 1 is a block diagram showing the structure of a 
previously proposed digital signal transmitting 
apparatus: 

Fig. 2 is a block diagram showing the structure of a 
previously proposed digital signal receiving appa- 
ratus: 

Fig. 3 is a block diagram explaining problems occur- 
ring when, in the previously proposed digital signal 
receiving apparatus, software information is down- 
loaded: 

Fig. 4 is a block diagram showing the structure of a 
digital signal transmitting apparatus according to an 
embodiment of the invention: 
Fig. 5 is a block diagram showing the structure of a 
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digital signal receiving apparatus according to an 
embodiment of the invention: 
Fig. 6 is a block diagram showing the detailed struc- 
ture of a sending section of the digital signal trans- 
mitting apparatus according to the embodiment of 
the invention: 

Fig. 7 is a block diagram showing the detailed struc- 
ture of a software supply section of the digital signal 
transmitting apparatus according to the embodi- 
ment of the invention: 

Fig. 3 IS a block diagram showing the detailed struc- 
ture of a receiving section of the digital signal receiv- 
ing apparatus according to the embodiment of the 
invention: 

Fig. 9 is a block diagram showing the detailed struc- 
ture of a recording/reproducing section of the digital 
signal receiving apparatus according to the embod- 
iment of the invention: 

Fig. 10 is a block diagram showing the schematic 
structure of a digital signal transmitting system of 
the embodiment: and 

Fig. 11 is a block diagram explaining a software sup- 
ply system of a package system. 

Preferred embodiments of this invention will now be 
described with reference to the accompanying draw- 
ings: 

(1) Structure of Digital Signal Transmitting Apparatus 
and Digital Signal Receiving Apparatus 

In Fig. 4. where the same reference numerals are 
applied to parts corresponding with Fig. 1 . reference nu- 
meral 30 denotes a digital signal transmitting apparatus 
according to an embodiment of the invention, tn the dig- 
ital signal transmitting apparatus 30. i.e.. a broadcasting 
station, when predetermined services, for example, fee- 
charged software data are transmitted, twofold security 
is ensured by putting a cipher of a storage system over 
software data and further putting a cipher of a broad- 
casting system over the software data. 

The digital signal transmitting apparatus 30 is con- 
stituted by a digital signal sending section 31 and a soft- 
ware supply section 32. In the digital signal transmitting 
apparatus 30. when fee-charged software information, 
for example, image software, music software, electronic 
program list, shopping information, game software, or 
education information is requested by users, as shown 
in Fig. 4, the software information as a program source 
PS2 is input to the software supply section 32. 

In the software supply section 32. the software data 
PS2 comprising a digital signal is band-compression 
coded by means of an MPEG encoder 33. The band- 
compression coded digital signal is input to a packet 
generation section 34 and a trick play processing sec- 
tion 35. In the trick play processing section 35. variable- 
speed reproduction processing, i.e.. processing for ex- 
tracting an intra-coded (1) picture is performed for the 



video data. The extracted I picture is output to a multi- 
plexer 36. Note that a technique for variable-speed re- 
producing an image which has been band-compression 
coded by an MPEG method is disclosed in Japanese 
5 Patent Application No. 287702/1 993. 

In the packet generation section 34. the input digital 
signal is packetized to video data, audio data, and other 
data. These packetized data are multiplexed by a mul- 
tiplexer 36. In the multiplexer 36. an I picture is buried 
10 in the video data. A cipher of a storage system is put 
over the multiplexed digital signal by an encryption 
processing section 37, and the encrypted signal is sent 
to a multiplexer 4 of a rear sending section 31 . 

tn the multiplexer 4. digital signals over which the 
'5 ciphers of storage system were put are multiplexed. In 
an encryption processing section 5. a cipher of a broad- 
casting system is put over this multiplexed digital signal. 
Therefore, a cipher of a storage system and a cipher of 
a broadcasting system are put over the digital signal 
20 sent from the digital signal transmitting apparatus 30 in 
duplicate. In the sending section 31 , key data that are 
added to programs are all common and broadcasting 
billing data is charge free. 

This double security added digital signal is sent "to 
25 a terminal installed in a household, i.e.. a digital signal 
receiving apparatus 40 directly from a satellite 8 or by 
way of a signal distnbuting station 9 from the satellite's, 
as shown in Fig. 5. where the same reference numerals 
are applied to corresponding parts with Fig. 2. In the dig- 
30 ital signal receiving apparatus 40. the cipher of the 
broadcasting system, put over the transmitted digital 
signal, is decrypted by accessing a smart card 19. and 
the digital signal can be downloaded to a digital storage 
41 . That is. the cipher of the broadcasting system of the 
3S transmitted digital signal is decrypted by the decrypting 
section 15 and then the digital signal is recorded on the 
digital storage 41. 

In this case, the digital signal which is downloaded 
to the digital storage 41 is recorded in the state where 
^0 only the cipher of the storage system has been put over 
and also recorded in the state where variable-speed re- 
production processing has been performed. Therefore, 
even if the key of the broadcasting system, added by 
the sending section 31, were changed, there would be 
no influence. Also, no image is viewed free of cost be- 
cause the cipher of the storage system has been put 
over at point C of Fig. 5. 

When a user desires to see the software information 
PSo downloaded to the storage 41 . a CPU 42 performs 
50 an inquiry of registration to an authorization center 44 
(Fig. 4) for software information through a modem 43. 
by inputting an ID number registered independently of 
the broadcasting system (for example, on the screen of 
a personal computer, put an ID number). The CPU 42 
5s usually performs an inquiry of registration to a broad- 
casting-system authorization center 22 for the contract 
program PS^ and performs an inquiry of registration to 
the software-system authorization center 44 for the soft- 
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ware inlormation PSo. That is. the CPU 42 constructs 
two independent billing systems, a billing system for a 
broadcasting system and a billing system for a software 
system, by controlling the share of the modem 43. 

The authorization center 44 sends the ID number 
to the conditional access 45 (Fig. 4) of the software sup- 
ply section 32 and confirms registration, tf the authori- 
zation center 44 confirms registration, then bill process- 
ing is performed and the CPU 42 instructs a local con- 
ditional access 46 to decrypt a cipher. The local condi- 
tional access 46 has a function of decrypting the cipher 
of the software system. Hence, the reproduction limita- 
tion of the storage 41 is lifted and the cipher is decrypted, 
so that the user is able to see software information by 
the same manipulation as a normal video tape recorder 
(VTR). 

(2) Structure of Digital Signal Transmitting Apparatus 
according to an Embodiment 

The detailed constructions of a sending section 31 
and a software supply section 32 of a digital signal trans- 
mitting apparatus according to an embodiment of the 
present invention are shown in Figs. 6 and 1 . respec- 
tively. In this digital signal transmitting apparatus 30. 
when a normal contract program PSi is supplied, the 
program source PS, is input directly to the sending sec- 
lion 31 . and when fee-charged software information PS2 
is supplied, the fee-charged software information PSo is 
supplied to the sending section 31 through the software 
supply section 32. 

For the appreciation of the program PS^. the video 
signal and the audio signal of a program, which is sup- 
plied, for example, from a digital VTR 47. are band-com- 
pression coded by means of MPEG encoders 2A and 
2B and then are packetized for each video data and for 
each audio data by means of packet generation sections 
3A and 3B. The packetized video data and audio data 
are sent to a multiplexer 4 via a data bus 48, At the same 
time as this, for example, a personal computer 49 (here- 
inafter referred to as a "PC") sends data other than video 
data and audio data to a packet generation section 30 
through a data interface (data l/F) 50 to be packetized. 
The packetized data from the packet generation section 
3C is then sent through the data bus 48 to the multiplex- 
er 4. 

Also, a conditional access 23 sends key data 
through a data l/F 51 to a packet generation section 3D 
to packetize it. and the packet key data from the packet 
generation section 3D is sent through the data bus 48 
to the multiplexer 4. The conditional access 23 further 
sends key information for encrypting software data to 
an encryption processing section 5. In the multiplexer 4, 
the video data, the audio data, and other data are mul- 
tiplexed. The encryption processing section 5 puts a ci- 
pher over this multiplexed data, based on the key infor- 
mation input from the conditional access 23. The en- 
crypted data is error corrected by a F EC section 6. The 



error-corrected data is modulated by a modulator 7 and 
then transmitted to a satellite 3 via an up-converter 52. 

When, on the other hand, fee-charged software in- 
formation PS2 IS transmitted, the video signal and the 
5 audio signal of the software information PSg which is 
output, for example, from a digital VTR 53 are band- 
compression coded by means of MPEG encoders 33A 
and 33B, respectively. The band-compression coded 
video signal is input to a packet generation section 34A 
'0 and a trick play processing section 35. The packet gen- 
eration section 34A packetizes the input video signal. 
The trick play processing section 35 extracts an I picture 
from the input video signal and then outputs the I picture 
to a multiplexer 36. 
?5 The band-compression coded audio signal is input 
to a packet generation section 348. which packetizes 
the audio signal. Also, general data other than video 
data and audio data, input from the PC 54. is input 
through a data l/F 55 to a packet generation section 
20 34C, In addition, the conditional access 45 sends key 
data to a packet generation section 34D through a data 
l/F 56 and also sends key information for storage system 
to the encryption processing section 37. 

The packetized data from the packet generation 
25 sections 34A to 34D are multiplexed by the multiplexer 
36 through the data bus 57 and also the 1 picture is bur- 
ied in video data. An encryption processing section '37 
encrypts the multiplexed data, based on the key infor- 
mation input from the conditional access 45. and outputs 
20 the encrypted data to the packet generation section 3E 
of the sending section 31 through a data l/F 58 (Fig. 6). 
The packetized data from the packet generation section 
3E is sent through the data bus 48 to the multiplexer 4 
to be multiplexed, and then sent to the encryption 
35 processing section 5. In the encryption processing sec- 
tion 5. a cipher of the broadcasting system is put over 
the multiplexed data. The encrypted data is processed 
by the FEC section 6, the modulator 7. and the up-con- 
verter 52. The thus processed data is transmitted to the 
40 terminal 40 directly from the satellite S or by way of the 
signal distributing station 9 from the satellite 3. 

(3) Structure of Digital Signal Receiving Apparatus 
according to an Embodiment 

J5 

As shown tn Figs. 3 and 9 where the same reference 
numerals are applied to corresponding parts with Fig. 5. 
the digital signal receiving apparatus 40 according to an 
embodiment of the present invention is constituted by a 

so receiving section 60 (Fig. 3) for receiving a digital signal 
which is sent by the digital signal transmitting apparatus 
30 and a recording/reproducing section 51 (Fig. 9) for 
recording and reproducing the signal received by the re- 
ceiving section 60 on and from a recording medium. In 

55 this embodiment, the receiving section 60 and the re- 
cording/reproducing section 61 are interconnected by 
way of digital interfaces (digital l/F) 62 and 63. 

In the receiving section 60, the digital signal which 
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is transmittecl directly from the satellite 3 or by way of 
the signal distributing station 9 from the satellite 8 is in- 
put to a tuner 12A as a compressed digital signal. The 
tuned digital signal is demodulated by a demodulator 
12B and error corrected by an FEC section 12C. The 
error-corrected signal is then input to a decrypting block 
comprising a demultiplexer 1 4 and a decrypting section 
1 5. In the decrypting block, the cipher of the broadcast- 
ing system is decrypted with a private key which only a 
registered user can have. 

The general data where the cipher of the broadcast- 
ing system was decrypted and the video data where a 
plurality of program channels were time-division multi- 
plexed at units of packet of predetermined byte length 
are sent to a packet separation section 1 6 or the record- 
ing/reproducing section 61 . A path leading to the packet 
separation section 16 and a path leading to the record- 
ing/reproducing section 6l are switched by switching 
means (not shown). In this embodiment, the switching 
means has been switched to the recording/reproducing 
section 61 . The general data used herein includes text 
data, font data, video data, graphic data, and moving 
picture video data for administering a user's interface on 
a TV monitor 

The general data is input through a data port to a 
CPU block 64 which performs interactive processing. 
The CPU block 64 comprises a main CPU 42. an elec- 
trically erasable programmable read only memory 
(EEPROf\/l) 65. a modem interface (modem l/F) 66. a 
modem 43. a video random access memory (VRAIVI) 67. 
a graphic processor unit (GPU) 68. a read only memory 
(ROM) 69. and a dynamic random access memory 
(DRAM) 70, In the case of hard-disk incorporated sys- 
tems, general data is stored through a CPU bus in a hard 
disk once. The CPU 42 processes these general data 
in accordance with instructions externally manipulated 
by a controller, and necessary display data is output. 

On the other hand, the video data is input through 
the digital t/F 62 and the digital l/F 63 to the recording/re- 
producing section 61 and then the video data is pack- 
etized and separated by a packet separation section 71 . 
The packetized separated data is given time base cor- 
rector (T8C) processing and the format is converted by 
a format converting section 72. The format converted 
data is error corrected and modulated by way of a local 
conditional access 46. The modulated data is then re- 
corded on the recording medium of a mechanical deck 
74 by means of a record/reproduction processing sec- 
tion 73. Note that both of tapes and disks can be used 
as a recording medium. For example, there are digital 
VCRs, digital video disks (DVD), hard disks, and mini- 
floppy disks. 

If a user instructs reproduction, a command is input 
from the CPU 42 through the digital l/F 62 and the digital 
l/F 63 to a VCR controller 75. The VCR controller 75. 
based on this command, drives the mechanical deck 74 
by a dnver 76, Thereby, a search is made up to a desired 
absolute address on the recording medium and a track- 



ing operation is performed by an automatic tracking fol- 
lowing (ATF) 77. As a result, data, recorded on the re- 
cording medium, is reproduced by the record/reproduc- 
tion processing section 73. Note that the absolute ad- 
5 dress may be added in advance to transmission data, 
or may be added within the digital signal receiving ap- 
paratus 40. 

The reproduction signal, reproduced by the 
record/reproduction processing section 73. is demodu- 
^0 lated and then the cipher of the storage system is de- 
crypted by the local conditional access 46. The decrypt- 
ed reproduction signal is error corrected and the format 
is converted by the format converting section 72. The 
format converted reproduction signal is packetized by 
15 the packet generation section 7^ -^nd is sent through the 
digital l/F 63 and the digital l/F - : to the packet separa- 
tion section 1 6. in which the pacKet is separated. For the 
packet separated reproduction signal, the compression 
of the audio signal and the compression of the video sig- 
nal are decompressed by an MPEG audio decoder 1 7A 
and an MPEG image decoder 17B, respectively. 

The decompressed audio signal is converted to an 
analog signal by a digital-to-analog converter (DAC).79 
and is output. The decompressed video signal is encod- 
ed by a national television system committee (NTSC) 
encoder 80. Also, general data on a user interface is 
input from the CPU block 64 to an NTSC encoder *31. 
The general data, encoded with the aforementioned en- 
coder 81, is added to the video signal which is output 
from the encoder 80. and the general data is output. 

In a case where in the foregoing structure the soft- 
ware information PS2 is transmitted to the digital signal 
receiving apparatus 40, in the software supply section 
31 , a cipher of a software system is put over the software 
information PS2 and then in the sending section 32 a 
cipher of a broadcasting system is put over and with 
this double security ensured, the software information 
is transmitted to the digital signal receiving apparatus 
40, In the digital signal receiving apparatus 40. the ci- 
pher of the broadcasting system is decrypted and then 
the software information PSj is recorded on the digital 
storage 41 . When a user sees the software information 
PS2 recorded on the digital storage 41 . registration is 
confirmed by the authonzation center 44, If registration 
is confirmed, the cipher of the software system is de- 
crypted and the software information PS2 can be seen. 

According to the foregoing structure, the key data 
of the broadcasting system are rendered all common 
and also the billing data by brc -^casting is rendered 
free, and the software informaticf^ PS2 over which a ci- 
pher of the broadcasting system and a cipher of the soft- 
ware system are put in duplicate is transmitted when the 
software information PSg is supplied to the digital signal 
receiving apparatus 40. In the digital signal receiving ap- 
paratus 40. the cipher of the broadcasting system is de- 
crypted and then the software information PSo is down- 
loaded on the digital storage 41 . Therefore, security can 
be ensured because the cipher of the software system 
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has been put over the software information PS2 when 
downloading the software information PS2 to the digital 
storage 41, 

Also, according to the above-mentioned structure, 
the switching means, which switches the path leading 
to the packet separation section 1 6 and the path leading 
to the recording/reproducing section 61 . is provided, so 
that a digital signal transmitting system having both of 
the advantages of a video on demand and the advan- 
tages of a VTR can be provided to contract users. 

Also, according to the above-mentioned structure, 
the software information PSg is given variable-speed re- 
production processing in the software supply section 32 
and then transmitted to the digital signal receiving ap- 
paratus 40. so that contract users are able to reproduce 
the software information PS2 recorded on the storage 
41 at variable speed. 

Also, according to the above-mentioned structure, 
users are able to see, among a plurality of pieces of soft- 
ware information PSo downloaded, only desired soft- 
ware information at a desired time because a plurality 
of pieces of fee-charged software information PS2 can 
be downloaded to the storage 41 of the terminal 40 by 
making use of an unoccupied time band of a transmis- 
sion path and an unoccupied transmission path. In other 
words, each time software information PS, desired is 
selected, bill processing is performed and the reproduc- 
tion limitation of the storage 41 is lifted. This embodi- 
ment is also effective as a means for realizing the video 
on demand in a digital signal transmitting system which 
is not 1 : 1 as in the case of transmission by satellite. 

Also, according to the above-mentioned structure, 
the switching between the access to the authorization 
center 22 managing the billing information on the normal 
contract programs PS, and the access to the authoriza- 
tion center 44 managing the billing information on the 
software information PSj is controlled by way of the mo- 
dem 43. so that two independent billing systems, a bill- 
ing system for a broadcasting system and a billing sys- 
tem for a software system, can be constructed. 

(4) Structure of Digital Signal Transmitting System 

In Fig. iO where the same reference numerals are 
applied to corresponding parts with Figs. 4 and 5. refer- 
ence numeral 90 denotes the schematic construction of 
a digital signal transmitting system of another embodi- 
ment of the present invention. In the digital signal trans- 
mitting system 90. twofold security is ensured when pre- 
determined services, for example, fee-charged software 
information PS^ is transmitted, by putting a cipher of the 
storage system over the software information PS2 and 
further putting a cipher of the broadcasting system over 
that software information PS2. IVIoreover. an encryption 
key Km. which is used when the cipher of the storage 
system is put over, is encrypted with a personal key Kp2 
for software information use. 

When a user sees the program source PS^ trans- 



mitted by the digital signal transmitting apparatus 30. 
the user inserts the smart card 1 9 mailed from the broad- 
casting station 30 into the terminal 40 and inputs a reg- 
istered ID number of broadcasting system. IDi . Hence, 

5 the CPU 42 performs an inquiry of registration to the au- 
thorization center 22 through the modem 43. If the reg- 
istration of that user is confirmed, a program source Es 
(Data) over which a cipher of the broadcasting system 
was put is sent from the broadcasting station, i.e.. the 

10 digital signal transmitting apparatus 30. 

That is. in the broadcasting station 30. when the 
program source PS^ is transmitted to the digital signal 
receiving apparatus 40. in the encryption processing 
section 5. a cipher of the broadcasting system is put over 

'5 the program source PS, by means of an encryption key 
Ks. This encryption key Ks is encrypted with a work key 
Kw. and the work key Kw is encrypted with a personal 
key Kpl of broadcasting system given to each user 
Therefore, the encryption processing section 5 multi- 

20 plexes the program source Es(Data) over which a cipher 
of the broadcasting system was put. and the encryption 
key E(Ks) and the work key E(Kw). and transmits the 
multiplexed data to the digital signal receiving apparatus 
40. 

25 The smart card 19 includes the personal key Kpl 
which was used when encrypting the encryption key 
Km. Therefore, in the terminal 40, the cipher of the en- 
crypted work key E(Kw) is decrypted by the personal 
key Kpl and the cipher of the encryption key E(Ks) is 

30 decrypted by the decrypted work key Kw. Moreover, with 
the decrypted encryption key Ks. the cipher of the broad- 
casting system of the program source Es(Data) is de- 
crypted. The decrypted program source PSi is decom- 
pressed by the MPEG decoder 17 and converted to an 

35 analog signal. The converted analog signal is output to 
a TV set. 

When a user desires to download the software in- 
formation PS2 to the digital storage 41 (in this case, the 
above-mentioned switching means switches each time 

40 information is sent to the digital storage 41). the user 
inserts the smart card 1 9 into the terminal 40 and inputs 
a registered ID number of broadcasting system. IDi, 
Therefore, the CPU 42 pertorms an inquiry of registra- 
tion to the authonzation center 22 through the modem 

-15 43, If the registration of that user is confirmed, a program 
source Es (Em(Data)) over which a cipher of the broad- 
casting system and a cipher of the software system were 
put is sent from the broadcasting station 30. 

That is, in the encryption processing section 37 of 

50 the broadcasting station 30. a cipher of the storage sys- 
tem IS put over the software information PS2 by means 
of an encryption key Km for software information use. 
Also, this encryption key Km is encrypted with a person- 
al key Kp2 for software information use. given to each 

55 user. The encrypted software data Em(Data) is sent to 
the encryption processing section 5, and the encrypted 
encryption key £(Km) is sent to the authorization center 
44. 
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In the encryption processing section 5. a cipher of 
the broadcasting system is put over the software data 
Em(Data) over which a cipher of the software system 
was put. by means of the encryption key Ks. As de- 
scribed above, this encryption key Ks is encrypted with 
the work key Kw. and the work key Kw is encrypted with 
the personal key Kpl. The encryption processing sec- 
tion 5 multiplexes the software data Es{Em(Data)} over 
which the cipher of the software system and the cipher 
of the broadcasting system were put in duplicate, and 
the encryption key E(Ks) and the work key E(Kw), and 
transmits the multiplexed data to the terminal 40. 

In the terminal 40. the cipher of the broadcasting 
system of the doubly encrypted software data Es{Em 
(Data)t as described above is decrypted because the 
smart card 1 9 has been inserted in the terminal 40. The 
software data Em(Data) where the cipher of the broad- 
casting system was decrypted is recorded on the digital 
storage 41 . 

When a user sees the software data Em(Data) re- 
corded on the digital storage 41. the user inserts the 
smart card 19 into the terminal 40 and inputs a regis- 
tered ID number of software system. ID2. Thereby, the 
CPU 42 performs an inquiry of registration to the author- 
ization center 44 through the modem 43. If the registra- 
tion of the user is confirmed, bill processing is. per- 
formed. Then, the encryption key E{Km) is input from 
the authorization center 44 through, for example, a tel- 
ephone line and through the modem 43 to a smart card 
91. and the cipher of the encryption key E(Km) is de- 
crypted. 

That is. the smart card 91 includes the personal key 
Kp2 which was used when encrypting the encryption 
key Km of software system. Therefore, the cipher of the 
encryption key E(Km) is decrypted by the personal key 
Kp2. The decrypted encryption key Km is sent through 
the CPU 42 to the decryption section 46. 

In the decrypting section 46. the cipher of the soft- 
ware system, put over the software data Em(data). is 
decrypted by the encryption key Km. and the decrypted 
software data is sent to an fvlPEG decoder 17. In the 
MPEG decoder 17. the decrypted software data PS2 is 
decompressed and then converted to an analog signal. 
The analog signal is then output to a TV set. 

In the foregoing structure, when the software infor- 
mation PS2 is transmitted to the digital signal receiving 
apparatus 40. a cipher of the software system is put over 
the software information PS^ and then a cipher of the 
broadcasting system is put over and transmitted, and at 
the same time the encryption key Km. which was used 
when the cipher of the software system is put over, is 
encrypted with the personal key Kp2. 

In the digital signal receiving apparatus 40. the ci- 
pher of the broadcasting system of the software data Es 
{Em(Data)} is decrypted with the smart card 1 9 and then 
the decrypted software data is recorded on the digital 
storage 41 , When the software data Em(Data). recorded 
on the digital storage 41. is seen, the cipher of the en- 



cryption key E(Km) is decrypted with the smart card 91 . 
Also, the cipher of the software system, put over the soft- 
ware data Em(Data). is decrypted with the decrypted en- 
cryption key Km. 

5 According to the foregoing structure, when trans- 
mitting the software information PSj is transmitted to the 
digital signal receiving apparatus 40. a cipher of the soft- 
ware system and a cipher of the broadcasting system 
are put over the software information PSg, and the en- 

10 cryption key Km. used when the cipher of the software 
system is put over, is encrypted with the personal key 
Kp2. Therefore, the security of the software information 
PS2 can be ensured more firmly 

Also, according to the above-mentioned structure. 

^5 by incorporating the personal key Kp2 for decrypting the 
cipher of the encrypted encryption key E(Km) into the 
smart card 91 .. desired software information PS, can be 
seen at a desired time because users are able to decrypt 
with ease and reliability the cipher of the encryption key 

20 E(Km). 

(5) Other Embodiment 

The above-mentioned embodiments have been 
25 dealt with the case where a contract user has download- 
ed free-charged software information PSq to the storage 
41 and where the user sees the software information 
PS2 recorded on the digital storage 41 when the user 
desires to do so. However the present invention is not 
30 limited to this, but as shown in Fig. 1 1 . a package system 
100 can be constructed with a software supply section 
32 and a digital signal receiving apparatus 40. software 
information encrypted in the software supply section 32 
is recorded on a recording medium and packaged, and 
3S this package software 101 can be sent to users period- 
ically for example, by the month. 

In this case, as shown in Fig. 11. a billing system 
can be constructed only with the digital signal receiving 
apparatus 40. Also, by cheaply providing users with the 
•^0 software package 101 where a plurality of pieces of en- 
crypted software information are recorded, there can be 
constructed a new software information supply system 
where pieces of software information are packaged, 
such as a system where only information that users de- 
sire to see is billed and enjoyed. Note that the package 
software 101 includes, for example, ten movies. 

Further, the above-mentioned embodiments have 
been dealt with the case where the authorization center 
22 for a broadcasting system and the authonzation cent- 
50 er 44 for a software system are provided and the share 
of the modem 43 is controlled by means of the CPU 42. 
so that two independent billing systems are constructed. 
However, the present invention is not limited to this, but 
the bill processing with respect to the programs of the 
5S broadcasting and software systems can be performed 
with a single authorization center 

Further, the above-mentioned embodiment have 
been dealt with the case that there was used the digital 
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signal receiving apparatus 40 where the recording/re- 
producing section 61 is connected to the receiving sec- 
tion 60. However, the present invention is not limited to 
this, but it can use a digital signal receiving apparatus 
40 into which the recording/reproducing section 61 is in- 
corporated. 

Further the above-mentioned embodiment have 
been dealt with the case where variable-speed repro- 
duction processing was performed in the software sup- 
ply section 32. However the present invention is not lim- 
ited to this, but the variable-speed reproduction 
processing can be performed in the terminal, i.e.. digital 
signal receiving apparatus 40, 

Furthermore, the above-mentioned embodiment 
have been dealt with the case where the smart card 1 9 
for seeing a general contract program source PS^ and 
the smart card 91 for seeing software information PSj 
were individually provided. However the present inven- 
tion is not limited to this, but a single card can have both 
of the functions of the smart card 1 9 and the smart card 
91, 

Moreover the above-mentioned embodiment have 
been dealt with the case where the software information 
PSg was downloaded to the digital storage 41 . However 
the present invention is not limited to this, but the soft- 
ware information PSo can be seen at real time. In such 
a case, the switching means is switched to the path lead- 
ing to the packet separation section 16 and the smart 
cards 1 9 and 9 1 are inserted into the terminal 40. There- 
fore, the ciphers of broadcasting and software systems 
which have been put over the software information PS2 
are decrypted, and the software information PS2can be 
seen at real time. 

Finally, the above-mentioned embodiment have 
been dealt with the case where an audio signal and an 
Video stgnat are band-compression encoded and then 
transmitted to the digital signal receiving apparatus 40. 
However the present invention is not limited to this, but 
only the video signal can be band-compression encod- 
ed and transmitted to the digital signal receiving appa- 
ratus 40, 

While there has been described in connection with 
the preferred embodiments of the invention, it will be ob- 
vious to those skilled in the art that various changes and 
modifications may be aimed, therefore, to cover in the 
appended claims ail such changes and modifications as 
fall within the true scope of the invention. 



Claims 

1. A digital signal transrtittting method where at least 
a band-compression coded digital video signal is 
given encryption processing and transmitted, 
wherein 

when an image providing predetermined serv- 
ices is transmitted, said band-compression 



coded digital signal is given first-encryption 
processing and then the first-encryption proc- 
essed digital signal is further given said encryp- 
tion processing and transmitted. 

5 

2. The digital signal transmitting method according to 
claim 1 , wherein 

said band-compression coded and first-encryp- 
w tion processed digital signal are mixed with a 

digital signal where said band-compression 
encoding has been completed within a prede- 
termined image unit, and the mixed signal is 
given said encryption processing and transmit- 
'5 ted. 

3. The digital signal transmitting method according to 
claim 1 . wherein 

20 a first encryption key. which is used when giving 

said first-encryption processing to said band- 
compression coded signal, is encrypted with a 
second encryption key. 

25 4. A digital signal transmitting method where at least 
a band-compression coded digital video signal is 
given encryption processing and transmitred. 
wherein 

30 said band-compression coded and encryption 

processed digital signal is mixed with a digital 
signal where said band-compression encoding 
has been completed within a predetermined 
image unit to be transmitted. 

35 

5. A digital signal receiving apparatus for receiving at 
least a band-compression coded digital video signal 
over which a first cipher is put and then a second 
cipher is put and which is transmitted by a broad- 
40 casting station, comprising; 

second-decryption means for decrypting said 
second cipher put over said digital signal: 
recording/reproducing means for recording 

iS said digital signal, where said second cipher 

was decrypted, on a recording medium, and 
also for reproducing said digital signal recorded 
on said recording medium: and 
first-decryption means for decrypting said first 

50 cipher of a reproduction signal that is repro- 

duced from said recording medium. 

8. The digital signal receiving apparatus according to 
claim 5. wherein 

55 

said first decrypting means includes key 
decryption means decrypting a cipher put over 
an encryption key which is used when putting 
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said first cipher over said band-compression 
digital signal, and wherein 
a cipher, put over said encryption key, is 
decrypted by said key decryption means, and 
the first cipher of said reproduction signal is s 
decrypted with the decrypted encryption key 

7, The digital signal receiving apparatus according to 
claim 5, wherein: 

10 

said broadcasting station mixes said band- 
compression coded digital signal where the first 
cipher was put over and a digital signal where 
the band-compression encoding has been 
completed within a predetermined image unit. '5 
then put a second cipher over the mixed signal, 
and transmits it: and 

said recording/reproducing means records said 
digital signal over which the first cipher was put 
and also records said digital signal where the 20 
band-compression encoding has been com- 
pleted at a predetermined image unit, and at 
the time of variable-speed reproduction, out- 
puts a variable-speed reproduction image by 
means of said digital signal where the band- 25 
compression encoding has been completed at 
a predetermined image unit. 



8. A digital signal receiving apparatus which has a 
modem and, by controlling, by means of said 3o 
modem, switching of an access to a plurality of man- 
agement stations managing billing information, 
constructs a billing system of said plurality of man- 
agement stations. 

35 

9. A recording medium wherein at least a band-com- 
pression coded digital video signal has been 
encrypted and recorded. 
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